Hacker News Reader

matthewarkinon Ripple fined for acting as a money services business without registration

IANAL. You're using Stripe Connect (and assuming you're doing this the old connect way), its your user's Stripe account that is processing the charge and receiving the money. Your Stripe account isn't processing the charge and nor sending them money hence you're not transmitting anything. Stripe would be the MSB.

matthewarkinon Point of Sale Register Outage at Starbucks Stores in U.S. and Canada

I think Starbucks and Square have dropped their partnership: http://blogs.wsj.com/digits/2014/12/22/starbucks-drops-squar...

matthewarkinon Join the Dropbox Notes beta

Didn't Dropbox partner with Microsoft to offer Office Web app capabilities?

matthewarkinon Join the Dropbox Notes beta

Is this basically a newer version of Hackpad? (I believe Dropbox acquired them)

matthewarkinon IPv4 Address Market Takes Off

You couldn't just get a single IP address, you'd have to buy a routable block that contains that IP address, which while I believe technically is a /28, in practice is a /24 (256 addresses)

matthewarkinon Ask HN: What code do you frequently read?

The Stripe bindings (primarily Ruby, Node and PHP). The API docs don't show how to do anything so being able to see what is expected and the format from the function header is very helpful when helping out in IRC. Reading through the pull requests is also helpful in learning / speculating on some new features (this is pretty rare though)

matthewarkinon Stripe: Bitcoin

Last I checked, Stripe worked on top of the Coinbase API. The main benefit to using Stripe is that's it's one api and one account. For merchants, you also get fiat instead of holding bitcoin (I assume this is what the fee is primarily for). If you're already using Stripe checkout, adding bitcoin can be done in less than 5 lines of code.

matthewarkinon Stripe refusing access to cards, have a contact so we can avoid a public post?

I just forwarded this thread to some people I know at Stripe so hopefully they'll get back to you soon.

I know Stripe is normally quite comfortable transferring card data on the basis that the other side has the proper PCI compliance and that Stripe and the receiving party can agree upon a secure way to transfer the card holder data like through some sort of pgp encrypted file

matthewarkinon Fixed Raises $650K More and Heads to Oakland

My issue is that I'll happily own up to my mistake if the amount I have to pay is fair. A $60 parking ticket obtained during the $.25 an hour rate seems unfair when the street is half empty.

matthewarkinon Final (YC W15) Raises a Million for Its Fraud-Fighting Credit Card

Apple pay, to my knowledge uses the same card number per charge

matthewarkinon Ask HN: Looking for cheap Rails hosting

Why not use s3 with Heroku? You'll have to do this (or something similiar) anyways since Heroku will dump all your old data when you push a new commit.

matthewarkinon Ask HN: Should I report my main competitor for PCI Violations?

it would be trivial but the iframe (Stripe Checkout) does qualify for SAQ A.

matthewarkinon Ask HN: Should I report my main competitor for PCI Violations?

https://www.pcisecuritystandards.org/documents/Understanding...

There is a comparison of PCI SAQ A and EP, if all you do is link to a 3rd party site (or load an iFrame) and the CC is loaded in that PCI compliant site, you are OK in SAQ A.

Stripe.js is tricky. Stripe says their QSA has verified that the new version of Stripe.js will let their merchants qualify for SAQ A since the transport of credit card info happens through a iframe (you can see the updated Stripe.js https://js.stripe.com/v2/stripe-dss3-debug.js). I personally disagree with that, but Stripe Checkout definitely falls under SAQ A.

Per the linked doc: What types of e-commerce implementations are eligible for SAQ A-EP vs. SAQ A? SAQ A: Merchant website provides an inline frame (iFrame)to a PCI DSS compliant third-party processor facilitating the payment process.

SAQ A-EP: Merchant website loads or delivers script that runs in consumers’ browsers (for example, JavaScript) and provides functionality that supports creation of the payment page and/or how the data is transmitted to the payment processor.

matthewarkinon Ask HN: Should I report my main competitor for PCI Violations?

Re: PCI-DSS 3 Uh no, if you qualify for PCI SAQ A, you are fine (so if you link off site, or use an iframe to collect info - like Stripe Checkout). If you used a direct post method or some JS tokenization, its likely that you know fall under the PCI SAQ A-EP rules which would require PCI compliant hosting.

matthewarkinon Show HN: A Freelancing Site for Student Freelancers

I don't necessarily think there is a difference between students and programmers in general. What I'd like to accomplish is a more curated freelancing site, where qualified programmers don't necessarily have to compete with people offering services at a fraction of the cost. In addition a place where students can learn a bit about freelancing, so if a freelancer has a question on how to handle a certain type of client or how should something be done, we'd like to provide the resources to help the freelancer. Kind of a mix between an agency and just a freelancing site would be my goal as of now.

matthewarkinon Show HN: A Freelancing Site for Student Freelancers

Thanks, as a student I think its a bit hard to get work. Going to the big sites is hard because you're competing largely against a workforce that will charge less than you think / know you are worth. Also developing a portfolio is hard because well you're a student you don't tend to have much work despite having the skills.

That is a cool idea, I was thinking of ways to best organize groups of students to work on client projects, having that platform work on its own so the students can work their own projects is interesting. Would it basically be some sort of profile system with some sort of collaboration tools like phabricator / gitlab / group chat built in?

matthewarkinon The Interview

They're using Stripe checkout, so all your CC information is being entered in an iframe hosted by Stripe.

matthewarkinon How we hacked the hotel industry to save $200+ per night

Really? Put my credit card number and expiration in a Google Form?

matthewarkinon Ask HN: Is there any part-time dev jobs listing?

Contract work or part-time would be awesome. Hired seems really cool, but would rather finish school before I go full-time somewhere for more than a summer.

matthewarkinon 5% of Google's traffic is now IPv6

Yea, there could be a number of reasons for this. Companies may not see a need to upgrade to IPv6 just yet, all their internal machines have nat-ed addresses and they have enough public ip addresses. They use some legacy software / hardware X that doesn't support IPv6 (hey, some companies are still paying Microsoft to support XP).

matthewarkinon $82,982,977 USD: $ 0.04 Transaction Fee

A whole $.10 cheaper than sending a FedWire! that's <insert really small percent that I'm too lazy to do the math on>% cheaper!

matthewarkinon Ask HN: Would programming be easier if we had more types of brackets?

No, case and point Objective-C

matthewarkinon Stripe raises $70M at $3.5B valuation, double that of January

I've spoken to some Stripes about it, getting on top of IRC is definitely something they're working on and some hints of that are showing with the new developer support position.

I'm always happy to help out, Stripe's a fun and easy platform to develop upon, and its always fun to see what other people are building, see how they're using Stripe, etc. I definitely think I've learned as much helping as I've taught.

I will take an invite to the infamous Taco Tuesday though :p

matthewarkinon Ask HN: Freelancer? Seeking freelancer? (December 2014)

SEEKING WORK - Freelance Full stack developer.

Remote or SF Bay Area

Hi I'm Matt. I'm a student at Stanford but I have been working in industry for the last 3 years as a Jr. Software Engineer, and I have freelance for a few different companies.

I love payments - ACH, PCI, SWIFT are all awesome acronyms I could talk hours about. I tend to help out a bit in #Stripe and write about some Stripe stuff on http://mattarkin.com. Though I have also worked with Authorize.net, Braintree, and others.

Currently I've been working a lot with Node.js and Sails.js, as well as Swift. I am comfortable working in Ruby/Rails, C#, Python.

Random technologies / tools I'm happy working with / on: ElasticSearch, IronMQ, HTML5/CSS, JS, Digital Ocean, Heroku, AWS, Azure, Mongodb, MySQL, MSSQL, Couchbase, general server admin / it administration.

matt at mattarkin.com

matthewarkinon Unlimited Storage with Office 365 Subscription

They were already offering 1TB of storage for free, realistically they are probably rebranding 1TB to Unlimited because I highly doubt most of their users were getting near a TB of storage. (It was also 1 TB per user, so 5TB free for a Home account)

matthewarkinon Business, Caltrain group looks to improve rail commute system

You can use your Clipper Card on most transit systems (Golden Gate, BART, MUNI, VTA, AC Transit, Sam Trans). You can load generic cash that can be used on all the systems, or you can load the Bart "passes" (the $40 for $44). Some monthly passes will get you monthly passes on other transit systems, like a 2-zone Caltrain includes a VTA monthly pass.

So yea you can use a clipper card everywhere but its still complicated. Also, if you load your clipper card online it will take days to actually appear on your card.

matthewarkinon Stripe – Apple Pay

If you use Stripe-iOS it should auto fall back to a card number entry box.

matthewarkinon Stripe – Apple Pay

Yea they just totally revamped the beta, its pretty awesome. Bitcoin went from being a completely separate API to integrated with the standard charge APIs. It also got integrated into Stripe checkout.

matthewarkinon Stripe – Apple Pay

According to the email I got from American Express, the POS will see the DPAN. So every POS transaction would see the same unique card number.

matthewarkinon Stripe – Apple Pay

The retailer would only pay the Stripe fee. If I understand correctly, Apple collects some fees from the bank (that they take from the interchange fee)